CVE-2021-27446
10.0
CRITICAL · CVSS 3.1 · EPSS 3% (pctl 87)
In your normal cycle
Critical by CVSS (10), but no sign of active exploitation.
Description
The Weintek cMT product line is vulnerable to code injection, which may allow an unauthenticated remote attacker to execute commands with root privileges on the operation system.
Scoring
| CVSS | 10.0 (CRITICAL, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
| EPSS | 2.97% — more likely to be exploited than 87% of all CVEs |
| Weakness | CWE-94 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2022-05-16 |
| Last modified | 2026-06-17 |
Affected (32)
| Vendor | Product |
|---|---|
| weintek | cmt-ctrl01 |
| weintek | cmt-ctrl01 firmware |
| weintek | cmt-fhd |
| weintek | cmt-fhd firmware |
| weintek | cmt-g01 |
| weintek | cmt-g01 firmware |
| weintek | cmt-g02 |
| weintek | cmt-g02 firmware |
| weintek | cmt-g03 |
| weintek | cmt-g03 firmware |
| weintek | cmt-g04 |
| weintek | cmt-g04 firmware |
| weintek | cmt-hdm |
| weintek | cmt-hdm firmware |
| weintek | cmt-svr-100 |
| weintek | cmt-svr-100 firmware |
| weintek | cmt-svr-102 |
| weintek | cmt-svr-102 firmware |
| weintek | cmt-svr-200 |
| weintek | cmt-svr-200 firmware |
| weintek | cmt-svr-202 |
| weintek | cmt-svr-202 firmware |
| weintek | cmt3071 |
| weintek | cmt3071 firmware |
| weintek | cmt3072 |
| weintek | cmt3072 firmware |
| weintek | cmt3090 |
| weintek | cmt3090 firmware |
| weintek | cmt3103 |
| weintek | cmt3103 firmware |
| weintek | cmt3151 |
| weintek | cmt3151 firmware |
References
→ the Explorer · watch your stack · NVD